docker flannel 利用K8S技术栈打造个人私有云系列文章目录及环境搭建指南

《Linux就该这么学》是一本基于最新Linux系统编写的入门必读书籍，内容面向零基础读者，由浅入深渐进式教学，销量保持国内第一，年销售量超过10万余本。点此免费在线阅读。

近来被业务折腾的死去活来，实在没时间发贴，花了很多个夜晚才写好这篇贴子，后续会加油的！

【利用K8S技术栈塑造个人私有云系列文章目录】

注：本文首发于My公众号CodeSheep，可长按或扫描下边的当心心来订阅↓↓↓

环境介绍玩集群嘛，其实要搞几台机器做节点！无赖自己并没有性能很强劲的多余机器，在家里翻箱倒柜docker flannel，找出了几台简陋的本子，试试看吧，与其垫桌脚不如掏出来遛遛弯…

总体环境安排如右图所示：

各部份简介如下：

Master节点(一台08年买的Hedy电脑Centos7.364bit)

Slave节点(一台二手ThinkpadT420sCentos7.364bit)

Client节点（一台12年的SonyVaioSVS13Win7Ultimate）

Docker镜像库房

WirelessRouter（雷猴子家的红米路由器3）

各部份全部都是由wifi进行互联，我个人不太喜欢一大堆线绕来绕去环境打算先设置master节点和所有slave节点的主机名

master上执行：

hostnamectl --static set-hostname  k8s-master

slave上执行：

hostnamectl --static set-hostname  k8s-node-1

更改master和slave上的hosts

在master和slave的/etc/hosts文件中均加入以下内容：

192.168.31.166   k8s-master
192.168.31.166   etcd
192.168.31.166   registry
192.168.31.199   k8s-node-1

关掉master和slave上的防火墙

systemctl disable firewalld.service
systemctl stop firewalld.service

布署Master节点

master节点须要安装以下组件：

下边按次序探讨

1.etcd安装

# [member]
ETCD_NAME=master
ETCD_DATA_DIR="/var/lib/etcd/default.etcd"
#ETCD_WAL_DIR=""
#ETCD_SNAPSHOT_COUNT="10000"
#ETCD_HEARTBEAT_INTERVAL="100"
#ETCD_ELECTION_TIMEOUT="1000"
#ETCD_LISTEN_PEER_URLS="http://localhost:2380"

docker flannel_docker flannel_docker flannel

ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:2379,http://0.0.0.0:4001"
#ETCD_MAX_SNAPSHOTS="5"
#ETCD_MAX_WALS="5"
#ETCD_CORS=""
#
#[cluster]
#ETCD_INITIAL_ADVERTISE_PEER_URLS="http://localhost:2380"
# if you use different ETCD_NAME (e.g. test), set ETCD_INITIAL_CLUSTER value for this name, i.e. "test=http://..."
#ETCD_INITIAL_CLUSTER="default=http://localhost:2380"
#ETCD_INITIAL_CLUSTER_STATE="new"
#ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster"
ETCD_ADVERTISE_CLIENT_URLS="http://etcd:2379,http://etcd:4001"
#ETCD_DISCOVERY=""
#ETCD_DISCOVERY_SRV=""
#ETCD_DISCOVERY_FALLBACK="proxy"
#ETCD_DISCOVERY_PROXY=""
#ETCD_STRICT_RECONFIG_CHECK="false"
#ETCD_AUTO_COMPACTION_RETENTION="0"
#ETCD_ENABLE_V2="true"
#
#[proxy]
#ETCD_PROXY="off"
#ETCD_PROXY_FAILURE_WAIT="5000"
#ETCD_PROXY_REFRESH_INTERVAL="30000"
#ETCD_PROXY_DIAL_TIMEOUT="1000"
#ETCD_PROXY_WRITE_TIMEOUT="5000"
#ETCD_PROXY_READ_TIMEOUT="0"
#
#[security]
#ETCD_CERT_FILE=""
#ETCD_KEY_FILE=""
#ETCD_CLIENT_CERT_AUTH="false"
#ETCD_TRUSTED_CA_FILE=""
#ETCD_AUTO_TLS="false"
#ETCD_PEER_CERT_FILE=""
#ETCD_PEER_KEY_FILE=""
#ETCD_PEER_CLIENT_CERT_AUTH="false"
#ETCD_PEER_TRUSTED_CA_FILE=""
#ETCD_PEER_AUTO_TLS="false"
#
#[logging]
#ETCD_DEBUG="false"
# examples for -log-package-levels etcdserver=WARNING,security=DEBUG
#ETCD_LOG_PACKAGE_LEVELS=""
#
#[profiling]
#ETCD_ENABLE_PPROF="false"
#ETCD_METRICS="basic"
#
#[auth]
#ETCD_AUTH_TOKEN="simple"

首先启动etcd服务

systemctl start etcd // 启动etcd服务

再获取etcd的健康指标瞧瞧：

etcdctl -C http://etcd:2379 cluster-health
etcdctl -C http://etcd:4001 cluster-health

2.flannel安装

# Flanneld configuration options  
# etcd url location.  Point this to the server where etcd runs
FLANNEL_ETCD_ENDPOINTS="http://etcd:2379"
# etcd config key.  This is the configuration key that flannel queries
# For address range assignment
FLANNEL_ETCD_PREFIX="/atomic.io/network"
# Any additional options that you want to pass
#FLANNEL_OPTIONS=""

etcdctl mk /atomic.io/network/config '{ "Network": "10.0.0.0/16" }'

systemctl start flanneld.service
systemctl enable flanneld.service

3.docker安装

该部份网上教程太多了，主要步骤如下

4.kubernets安装

k8s的安装命令很简单，执行：

yum install kubernetes

但k8s须要配置的东西比较多，正如第一节“环境介绍”中提到的，虽然master上须要运行以下组件：

下边详尽论述：

###
# kubernetes system config
#
# The following values are used to configure the kube-apiserver
#

docker flannel_docker flannel_docker flannel

# The address on the local server to listen to.
KUBE_API_ADDRESS="--address=0.0.0.0"
# The port on the local server to listen on.
KUBE_API_PORT="--port=8080"
# Port minions listen on
KUBELET_PORT="--kubelet-port=10250"
# Comma separated list of nodes in the etcd cluster
KUBE_ETCD_SERVERS="--etcd-servers=http://etcd:2379"
# Address range to use for services
KUBE_SERVICE_ADDRESSES="--service-cluster-ip-range=10.254.0.0/16"
# default admission control policies
# KUBE_ADMISSION_CONTROL="--admission-control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota"
KUBE_ADMISSION_CONTROL="--admission-control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ResourceQuota"
# Add your own!
KUBE_API_ARGS=""

###
# kubernetes system config
#
# The following values are used to configure various aspects of all
# kubernetes services, including
#
#   kube-apiserver.service
#   kube-controller-manager.service
#   kube-scheduler.service
#   kubelet.service
#   kube-proxy.service
# logging to stderr means we get it in the systemd journal
KUBE_LOGTOSTDERR="--logtostderr=true"
# journal message level, 0 is debug
KUBE_LOG_LEVEL="--v=0"
# Should this cluster be allowed to run privileged docker containers
KUBE_ALLOW_PRIV="--allow-privileged=false"
# How the controller-manager, scheduler, and proxy find the apiserver
KUBE_MASTER="--master=http://k8s-master:8080"

docker flannel_docker flannel_docker flannel

systemctl start kube-apiserver.service
systemctl start kube-controller-manager.service
systemctl start kube-scheduler.service

systemctl enable kube-apiserver.service
systemctl enable kube-controller-manager.service
systemctl enable kube-scheduler.service

布署Slave节点

slave节点须要安装以下组件：

下边按次序论述：

1.flannel安装

# Flanneld configuration options  
# etcd url location.  Point this to the server where etcd runs
FLANNEL_ETCD_ENDPOINTS="http://etcd:2379"
# etcd config key.  This is the configuration key that flannel queries
# For address range assignment
FLANNEL_ETCD_PREFIX="/atomic.io/network"
# Any additional options that you want to pass
#FLANNEL_OPTIONS=""

systemctl start flanneld.service
systemctl enable flanneld.service

2.docker安装

参考前文master节点上布署docker过程深度linux，此处不再赘言

3.kubernetes安装

安装命令：yuminstallkubernetes

不同于master节点，slave节点上须要运行kubernetes的如下组件：

下边详尽论述要配置的东西：

###
# kubernetes system config
#
# The following values are used to configure various aspects of all
# kubernetes services, including
#
#   kube-apiserver.service
#   kube-controller-manager.service
#   kube-scheduler.service
#   kubelet.service
#   kube-proxy.service
# logging to stderr means we get it in the systemd journal
KUBE_LOGTOSTDERR="--logtostderr=true"

docker flannel_docker flannel_docker flannel

# journal message level, 0 is debug
KUBE_LOG_LEVEL="--v=0"
# Should this cluster be allowed to run privileged docker containers
KUBE_ALLOW_PRIV="--allow-privileged=false"
# How the controller-manager, scheduler, and proxy find the apiserver
KUBE_MASTER="--master=http://k8s-master:8080"

###
# kubernetes kubelet (minion) config
# The address for the info server to serve on (set to 0.0.0.0 or "" for all interfaces)
KUBELET_ADDRESS="--address=0.0.0.0"
# The port for the info server to serve on
# KUBELET_PORT="--port=10250"
# You may leave this blank to use the actual hostname
KUBELET_HOSTNAME="--hostname-override=k8s-node-1"
# location of the api-server
KUBELET_API_SERVER="--api-servers=http://k8s-master:8080"
# pod infrastructure container
KUBELET_POD_INFRA_CONTAINER="--pod-infra-container-image=registry.access.redhat.com/rhel7/pod-infrastructure:latest"
# Add your own!
KUBELET_ARGS=""

systemctl start kubelet.service
systemctl start kube-proxy.service

systemctl enable kubelet.service
systemctl enable kube-proxy.service

至此为止，k8s集群的搭建过程就完成了docker flannel，下边来验证一下集群是否搭建成功了

验证集群状态

OKlinux认证，节点早已就绪，可以在里面做实验了！

参考文献杂记

作者更多的SpringBt实践文章在此：

假如有兴趣，也可以抽点时间瞧瞧作者一些关于容器化、微服务化方面的文章：

Tagged:
Author

这篇优质的内容由TA贡献而来

刘遄

《Linux就该这么学》书籍作者，RHCA认证架构师，教育学（计算机专业硕士）。

发表回复